Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
89,220cataloged exploits
41,197CVEs with public exploitation
24,696lab-tested
AllReferência 26,738Exploit-DB 24,490GitHub PoC 18,525exploitation intelligence 11,299Nuclei 4,626Metasploit 3,542✓ verified onlyrecentpopularrisk
11,299 exploits
denial-of-service
RCE via OOM corruption
100RISK
denial-of-service
RCE via stale global state
100RISK
initial-access
RCE via stale global state
100RISK
initial-access
CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle
100RISK
initial-access
RCE via OOM corruption
100RISK
info-leak
An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. An unauthenticated user can access /osm/REG
50RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
RCE via OOM corruption
100RISK
info-leak
Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Trave
60RISK
info-leak
ipv4: validate checksum_start before completing checksum
48RISK
initial-access
Xinuos (formerly SCO) Openserver v5 and v6 allows attackers to execute arbitrary commands via shell metacharacters in ou
35RISK
info-leak
JeeWMS Path Traversal via showOrDownByurl.do
41RISK
initial-access
TOTOLINK N150RT formWsc command injection
38RISK
denial-of-service
Out-of-Bounds Write in Google Brotli Decoder
70RISK
denial-of-service
Out-of-Bounds Write in Google Brotli Decoder
70RISK
denial-of-service
Out-of-Bounds Write in Google Brotli Decoder
70RISK
denial-of-service
Out-of-Bounds Write in Google Brotli Decoder
70RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
100RISK
local
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISK
remote-with-credentials
Integer Overflow or Wraparound in GitLab
100RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
RCE via OOM corruption
100RISK
client-side
Out-of-Bounds Write in Google Brotli Decoder
70RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
RCE via OOM corruption
100RISK
local
Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects
71RISK
initial-access
RCE via OOM corruption
100RISK
initial-access
RCE via stale global state
100RISK
We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and exploitation-intelligence sources. A public PoC existing does not mean the flaw is exploitable in your environment.